$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa File: cd939959-f7a9-375a-86a0-c699a51f7975.roa (raw, json) Hash identifier: 6fFyYHT0heAC14RPKgAYqHzqReCBcygkvuJuHr6EG9k= Subject key identifier: 98:11:AC:54:7D:09:5E:33:C4:6A:ED:57:F6:42:8C:D1:8A:A0:B7:4A Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584DB34034847166FE2CCB074EC0 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa Signing time: Sat 02 May 2026 13:00:31 +0000 ROA not before: Sat 02 May 2026 13:00:31 +0000 ROA not after: Fri 31 Jul 2026 13:00:31 +0000 asID: 21947 IP address blocks: 199.195.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b3:40:34:84:71:66:fe:2c:cb:07:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: May 2 13:00:31 2026 GMT Not After : Jul 31 13:00:31 2026 GMT Subject: CN=69457e10-f9a5-4dda-ae8c-4b358bab33a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:dd:d1:8c:36:cc:c2:9e:eb:34:bf:a9:9a:a7: 62:a1:e2:9a:42:1a:1e:e5:6e:57:8d:c7:1d:3a:f3: 73:38:7c:95:16:46:74:0b:5c:e8:5e:fc:f6:6d:9d: 4e:e6:cc:60:b5:e3:f9:99:61:24:c1:30:0c:4e:1e: 18:b1:cb:6b:42:59:56:05:f4:6e:a6:e6:2a:00:ef: 9b:d6:97:af:41:c3:ea:41:fd:07:be:88:24:2c:94: f7:a4:34:a6:b7:c4:06:ba:7c:e5:86:95:3c:44:5c: a9:4c:d3:b3:09:da:44:5b:72:5b:ba:b2:0a:cd:25: 32:82:f1:c0:1c:c3:ea:73:cf:2f:3d:b8:a5:7e:7c: 0c:4e:64:cb:7f:a7:57:e5:73:33:7d:ab:3f:e6:38: 9a:35:9a:3f:4e:80:12:87:01:96:b6:50:77:2c:72: 0a:f6:e6:26:e8:cd:2a:18:e6:71:51:fe:12:0b:45: 98:63:c9:31:25:ab:56:85:90:bf:a4:42:ed:63:ed: e8:18:bd:1c:63:e7:a4:c4:37:b8:50:3f:4d:ec:75: 39:fe:d2:7d:23:20:cf:b7:85:6f:31:9c:61:29:11: bc:26:20:b3:bc:61:b0:65:51:ac:af:dd:7e:5a:ae: 40:ae:76:87:11:c7:43:d9:3f:c2:cd:e0:0d:f2:8b: b2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:11:AC:54:7D:09:5E:33:C4:6A:ED:57:F6:42:8C:D1:8A:A0:B7:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 199.195.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:1f:20:3c:70:00:c5:cb:27:32:7c:f6:2f:c4:e4:7d:b3:86: 1c:4c:ff:0f:76:e2:e5:40:02:6a:92:c1:f2:c9:f9:76:6e:b5: 96:dc:25:81:97:5c:a8:ea:3e:59:b8:a2:98:58:02:8e:6d:ee: e7:ce:36:c6:bc:63:e6:d4:52:b3:dc:87:dc:f5:e3:5a:7b:c3: 44:2c:a4:6c:cd:f1:1e:98:1b:d6:e5:c2:f4:d5:ec:78:3c:e1: cb:31:c9:f9:44:92:bd:fd:da:87:29:1a:82:57:dd:55:6f:f1: 26:03:e9:28:2c:4c:01:e0:d8:ed:2a:b7:b9:77:e3:83:b6:9c: 28:88:74:e2:38:3e:c9:65:38:c5:3a:46:ae:4f:cd:5c:80:b9: 2b:6e:6c:54:f9:bf:2d:75:4a:93:eb:f7:b6:e5:e8:33:55:6f: 10:c9:c2:eb:c1:9b:56:04:27:46:53:20:dc:27:21:11:30:07: f2:90:f2:e6:26:04:d2:8a:1c:4c:3d:0c:f0:59:21:b1:57:0d: 0c:35:46:a9:eb:4d:4e:4d:7b:74:79:f9:86:ed:73:9d:54:93: f6:a4:51:df:8d:f0:47:bc:7e:d8:5b:d4:36:7a:d2:a5:f8:88: 8a:e5:04:52:08:18:8e:2a:2a:a2:fc:01:ea:e6:0c:61:7a:70: 8c:d4:46:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2zQDSEcWb+LMsHTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI2MDUwMjEzMDAzMVoXDTI2MDczMTEzMDAzMVowLzEtMCsGA1UEAxMk Njk0NTdlMTAtZjlhNS00ZGRhLWFlOGMtNGIzNThiYWIzM2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt3RjDbMwp7rNL+pmqdioeKaQhoe5W5Xjccd OvNzOHyVFkZ0C1zoXvz2bZ1O5sxgteP5mWEkwTAMTh4YsctrQllWBfRupuYqAO+b 1pevQcPqQf0HvogkLJT3pDSmt8QGunzlhpU8RFypTNOzCdpEW3JburIKzSUygvHA HMPqc88vPbilfnwMTmTLf6dX5XMzfas/5jiaNZo/ToAShwGWtlB3LHIK9uYm6M0q GOZxUf4SC0WYY8kxJatWhZC/pELtY+3oGL0cY+ekxDe4UD9N7HU5/tJ9IyDPt4Vv MZxhKRG8JiCzvGGwZVGsr91+Wq5ArnaHEcdD2T/CzeAN8ouyCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgRrFR9CV4zxGrtV/ZCjNGKoLdKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvY2Q5Mzk5NTktZjdhOS0z NzVhLTg2YTAtYzY5OWE1MWY3OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8N4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHofIDxwAMXLJzJ89i/E5H2zhhxM/w924uVAAmqSwfLJ+XZutZbcJYGX XKjqPlm4ophYAo5t7ufONsa8Y+bUUrPch9z141p7w0QspGzN8R6YG9blwvTV7Hg8 4csxyflEkr392ocpGoJX3VVv8SYD6SgsTAHg2O0qt7l344O2nCiIdOI4PsllOMU6 Rq5PzVyAuStubFT5vy11SpPr97bl6DNVbxDJwuvBm1YEJ0ZTINwnIREwB/KQ8uYm BNKKHEw9DPBZIbFXDQw1RqnrTU5Ne3R5+Ybtc51Uk/akUd+N8Ee8fthb1DZ60qX4 iIrlBFIIGI4qKqL8AermDGF6cIzURl8= -----END CERTIFICATE-----Generated at Wed May 13 08:37:28 2026 by rpki-client